System Center Configuration Manager Feedback

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Standard Disclaimer – our lawyers made us put this here ;-) Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos which you do not want to grant a license to Microsoft. See the “User Voice Terms of Service” link below for more information.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

When an admin closes an idea you've voted on, you'll get your votes back from that idea.

You can remove your votes from an open idea you support.

To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".

Tell us your idea

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

at the moment if you go to Administration Servers and Site systems roles select the Intune connector and select Properties you get nothing about the configuration. Also if you go to monitoring\component status then show status on the Windows_intune_connector you get no status at all regardless of whether it is working. If you go from there Start service manager and try and query the windows_Intune_Service you get an error message "error communicating with component". This all leads you to believe that the Intune service is broken on the SCCM server when in fact this is completely normal behaviour. This is very misleading especially when you install Intune the first time in SCCM and also makes it apparently opaque when troubleshooting in the future if there is an issue. Yes there is DMPuploader\downloader and cloudusersync logs that are relevant for troubleshooting but it would be good if the service at least did not look like it was broken ion the console when it is in fact healthy and some status messages would not be a bad idea either..

at the moment if you go to Administration Servers and Site systems roles select the Intune connector and select Properties you get nothing about the configuration. Also if you go to monitoring\component status then show status on the Windows_intune_connector you get no status at all regardless of whether it is working. If you go from there Start service manager and try and query the windows_Intune_Service you get an error message "error communicating with component". This all leads you to believe that the Intune service is broken on the SCCM server when in fact this is completely normal behaviour. This is…

Below is a feature that we at the AFECMO could use to ensure that our branding can be competed in a singe TS step. With out this functionality we have to create a task sequence step to manually run setup.exe with the desired arguments.

Several command-line options are available to upgrade Windows 10 (https://msdn.microsoft.com/en-us/windows/hardware/commercialize/manufacture/desktop/windows-setup-command-line-options).
By default, the "Upgrade operating system" task use the following command "Setup.exe /auto Upgrade /NoReboot /Quiet /DynamicUpdate Disable /ImageIndex 1 /PostOOBE <location> /PostRollback <location>" and if you want to use other switches, you must delete the default 'Upgrade operating system" task and use a "Run command line" task.
Could you provide a system to dynamically change command-line options (eg switches [/ Auto {Clean | DataOnly | Upgrade}], [/ InstallLangPacks <location>], ...).

Copied and pasted from a closed feature request.

Below is a feature that we at the AFECMO could use to ensure that our branding can be competed in a singe TS step. With out this functionality we have to create a task sequence step to manually run setup.exe with the desired arguments.

We cannot see what updates we would be able to download by selecting a certain category on the software update point, without actually downloading the updates that fit that category. For example, try finding KB4013214 on WSUS. Impossible. Why is it so easy for Consumer to upgrade to 1703 but enterprise customers get shafted with WSUS not containing the updates you need?

So at least one competitor has the capability to send txt messages directly to managed devices from the administrator. This is useful to be able to draw users attention to changes in policy coming or asking them to upgrade iOS versions, upcoming maintenance of Intune etc. It would be great if we could send a message directly from the CM2012 console to a single device or an entire collection of devices. it doesn't have to be 2 way communication, just a way of sending admin alerts to end users. SMS texts tend to be more immediate in nature and draw attention to themselves rather more than simple emails.

So at least one competitor has the capability to send txt messages directly to managed devices from the administrator. This is useful to be able to draw users attention to changes in policy coming or asking them to upgrade iOS versions, upcoming maintenance of Intune etc. It would be great if we could send a message directly from the CM2012 console to a single device or an entire collection of devices. it doesn't have to be 2 way communication, just a way of sending admin alerts to end users. SMS texts tend to be more immediate in nature and draw…

Currently, if you have forests that have the same Active Directory Site name in them, SCCM only imports the first one it finds as a boundary. This makes using a Site as a boundary very unreliable when assigning site systems.
For example:
Forest a.com has a Site 'HQ'
Forest b.com also has a Site 'HQ'
SCCM imports a.com/HQ as AD Site, ignoring b.com/HQ
Client pc1.b.com is in Site HQ in b.com, but due to the boundary mixup, tries to access the DP in a.com, which it doesn't trust.
If Sites were made to be unique in a "(domain or forest)/Site" (or some other manner that includes more than just site name) rather than just Site name, pc1.b.com would know to get to the DP in b.com's network instead.

Currently, if you have forests that have the same Active Directory Site name in them, SCCM only imports the first one it finds as a boundary. This makes using a Site as a boundary very unreliable when assigning site systems.
For example:
Forest a.com has a Site 'HQ'
Forest b.com also has a Site 'HQ'
SCCM imports a.com/HQ as AD Site, ignoring b.com/HQ
Client pc1.b.com is in Site HQ in b.com, but due to the boundary mixup, tries to access the DP in a.com, which it doesn't trust.
If Sites were made to be unique in a "(domain or forest)/Site"…

Show different icon for user and device collections in Application Deployment tab.
At this moment you see in the Application - tab Deployment the same icon for user and device collections. If that could be changed so that you see a collection-icon with a human head on top of it for a user collection and a collection-icon with an computer on top of it (see attachment). Then you can see what kind of collection the deployment is targetted, which helps for troubleshooting.

we have a lot of middle sized Locations with max. 2 Mbps Connections that hold distribution points and we often have issues replicating. It would be great to leverage something like DFSR (with cross file remote differential compression). Also it would be great if we finally could copy single files between DPs when there were issues during DP update for a package. Wouldn't that be possible with a small command that verifies checksum and updates the CM database Information.

A PowerShell cmdlet that will test the connectivity and communication of the client to the SCCM server. This is requested as there are multiple articles that document the Updates process for SCCM 2007 but none that provide a high level overview for SCCM 2012. Powershell would be ideal as it is able to execute WMI methods then query SCCM logs to verify the success or failure (along with the error message) of the SCCM 2012 Updates process.

SCCM Packages - Install another program first does not respect "Only when no user is logged on" while one has setting "Allow software installation outside of maintenance window when assignment time is reached"
I deployed one Package that had to uninstall first old version of the program and the install the new version, Only when user is logged off. Only uninstallation worked while user was logged on=fail. There was no deadline for the installation and Maintenace Window was 16.00-06.00.

New Software center (1511) still the same bug than on previous version, where size of “Installed software” is given as “Less than 1 MB”, and only changes to real value when I click on the row.
Do MS any plan/idea how to fix the issue ?
Thank you
regards

After patching is complete on the client, the "Updates were installed" date in Windows Update does not change to the current date. a feature that would update this date after a successful patching is complete on the client will be extremely for reporting

When a device is added to a collection but is not a member of the limiting collection(s), there should be a prompt that notifies the user of this and what collection(s) the device needs to be a member of first.

When creating a new software metering rule, the console asks for the file version of the file. However, what is really required is the product version of the file. Unfortunately, these are not always equal as some vendors have different values between the two fields. When this occurs and time passes by and you put the file version, you have no metering data.

We cannot setup a application without detection logic. We have some script/package which has to be deployed on daily basis irrelevant whether application is installed or not and it doesn't require any detection logic. Can we request Microsoft to update Application model i.e we can setup application without detection logic

With the addition of allowing clients to prefer using a management point specified in a boundary group in R2 SP1 (or SP2), it would be a value add to be able to add the management point role to a site server that is a distribution point hanging off of a secondary site.